Defined in 1 files as a function:
Referenced in 1 files:
Smatch caller information:
net/bluetooth/smp.c smp_cmd_ident_addr_info() -> smp_distribute_keys()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | smp | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->remote_irk | 0,4096-ptr_max |
| PARAM_VALUE | 0 | smp->remote_key_dist | 0-253 |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp->remote_irk | (-1)-0,64 |
| BIT_INFO | 0 | smp->remote_key_dist | 0x0,0xf8 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | smp->id_addr_type | 0-255[u] |
| USER_DATA | 0 | smp->remote_irk->addr_type | 0-255[u] |
| USER_DATA | 0 | *smp->remote_irk->val | 0-255 |
| USER_PTR | 0 | smp->remote_irk->val | |
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &chan->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/smp.c smp_cmd_initiator_ident() -> smp_distribute_keys()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | smp | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->ltk | 0,4096-ptr_max |
| PARAM_VALUE | 0 | smp->ltk->authenticated | 0-1 |
| PARAM_VALUE | 0 | smp->ltk->list.next | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->ltk->list.prev | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->ltk->type | 1 |
| PARAM_VALUE | 0 | smp->remote_key_dist | 0,2-254 |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp->ltk | (-1),72 |
| BIT_INFO | 0 | smp->remote_key_dist | 0x0,0xf8 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | smp->ltk->ediv | 0-u16max[u] |
| USER_DATA | 0 | smp->ltk->enc_size | 0-16[u] |
| USER_DATA | 0 | smp->ltk->rand | 0-u64max[u] |
| USER_PTR | 0 | smp->ltk->val | |
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &chan->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/smp.c smp_cmd_pairing_req() -> smp_distribute_keys()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | smp | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->conn | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->conn->hcon | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->conn->hcon->hdev->dev_flags | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->preq | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->prsp | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->remote_key_dist | 0,2-6 |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp | 1-s32max |
| BIT_INFO | 0 | smp->remote_key_dist | 0x0,0x6 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | smp->remote_key_dist | 0,2-6[c] |
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &chan->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/smp.c smp_cmd_pairing_rsp() -> smp_distribute_keys()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | smp | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->preq | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->prsp | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->remote_key_dist | 0,2-246 |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp | 1-s32max |
| BIT_INFO | 0 | smp->remote_key_dist | 0x0,0xf6 |
| RX_PATH | |||
| NOCHECK_CALL | |||
| USER_DATA | 0 | smp->remote_key_dist | 0,2-246[c][u] |
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &chan->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/smp.c smp_cmd_sign_info() -> smp_distribute_keys()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | smp | 4096-ptr_max |
| PARAM_VALUE | 0 | smp->csrk | 0,4096-ptr_max |
| PARAM_VALUE | 0 | smp->csrk->type | 1,3 |
| PARAM_VALUE | 0 | smp->remote_key_dist | 0-251 |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp->csrk | 24 |
| BIT_INFO | 0 | smp->remote_key_dist | 0x0,0xfb |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &chan->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |
net/bluetooth/smp.c smp_resume_cb() -> smp_distribute_keys()
| Type | Parameter | Key | Value |
|---|---|---|---|
| PARAM_VALUE | 0 | smp | 4096-ptr_max |
| BUF_SIZE | 0 | smp | 1-s32max |
| BUF_SIZE | 0 | smp | 1-s32max |
| RX_PATH | |||
| NOCHECK_CALL | |||
| LOCK2 | &conn->lock | ||
| HALF_LOCKED2 | &chan->lock | ||
| HALF_LOCKED2 | &hdev->lock | ||
| HALF_LOCKED2 | &pool->lock | ||
| HALF_LOCKED2 | global &hci_cb_list_lock | ||
| TYPE_LOCK | (struct l2cap_conn)->lock |